P2: Non-deterministic toolset ordering (os.listdir unsorted)

## Problem
Toolsets (and users) are discovered using `os.listdir()` without sorting, so the visible order can be inconsistent across OS/filesystems and may appear “random” between machines or runs.
